5d2ff3a0a3820997a9929df3c53768079a7b4515f28ec4dc87dcf646a543d8fb

Analysis

max time kernel
17s
max time network
156s
platform
android_x64
resource
android-x64-20240624-en
resource tags

androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system
submitted
05-10-2024 02:19

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

5d2ff3a0a3820997a9929df3c53768079a7b4515f28ec4dc87dcf646a543d8fb.apk
Size

3.6MB
MD5

d836feab9d4bf3c6cf086bdc14724c8b
SHA1

c837cf7b181679a0081165e5fe4aa0eb94f748f8
SHA256

5d2ff3a0a3820997a9929df3c53768079a7b4515f28ec4dc87dcf646a543d8fb
SHA512

8c7801c5f1d8dfda39e0c65bdbea83feb8f217b41b69a245d01dd9e983a6a357c8b0b2be79123bed07e638655fc66ef3a093cc01be68c696ecfea5ab6c692dad
SSDEEP

98304:5s13ZL3Vf6JqeomaMDmQZ75ub8GoRJ6Odp/9hBbW+te6lXhAyHzwI:eTLVf6JumaMiQVWovl9jS+oS4I

Score

7^/10

banker discovery persistence

Malware Config

Signatures

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.systemservice

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.systemservice

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.systemservice

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.systemservice

com.systemservice
1⤵
- Acquires the wake lock
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4939

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Software Discovery

T1418

Security Software Discovery

T1418.001

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.systemservice/databases/com.google.android.datatransport.events

Filesize
56KB

MD5
07f4316484e3225a720bb9b6095c68af

SHA1
f722a9f72c36c7dc63e7aea7b4805e32e3777a86

SHA256
8ff7125560323a9a2470d77ae607f59795ea408a21143b65f1d9fab844b886c3

SHA512
4cf7bf24169a7cd70edd38fba53ee582ec9783d7d3273631b05812bd76eb03bf391b4845606cdd7c7fea96f3200a5a7b08dc7d3257a22cff7473904e9ede9838

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

Filesize
512B

MD5
938cb98f973f9e26a2793845ff6cfbbc

SHA1
d113a5167c8b05c3fd23badab1e854cbd6e51dd7

SHA256
8cf28757125e71680257453a8e3494ed954749ab9f4b33ec399bdd73677ff208

SHA512
ff46446bb7f0241d6675fa57e9fe8f6e1691bc135ac24f1f34d4d1b5e3f3ec85e4efe332a7e38ca0a142a6edf80e8f41519108bb7cda3f265c212ac381a9ee70

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

Filesize
8KB

MD5
4e0896a32e40e1952f57769720eac7a5

SHA1
09bb5b2ea573bb1a0bf169b2314ad2640d0dce23

SHA256
73d597a1d9e0a08f0dfe1e47968caf92a058e5895ef6914546495163c1b379f7

SHA512
540c1a43b11533a277a928efac3d8dc007e6055399572a26a0584fafacfec85df712ebac6eba278ff1d9193a8ef80248488ab27a9648e50b76052a555536e4dc

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

Filesize
8KB

MD5
a3811b9068520480f7a5742c775e87a1

SHA1
c44fd826d93fa3ce9f90433c478b050a61bf89c4

SHA256
94bc48534ba460e17fb35240d811a4226acb65228da2ab611800fcf5bdb71ebf

SHA512
d58d40d12adc3a1d1d73ae221d5e141c8bee8895ee5cf79afd07758e434aa042e9b3b0b861fa2827c2912bf460d2c6409277f5fb4b245bf681078cbc9ff549f6

Download Submit
/data/data/com.systemservice/databases/core.db

Filesize
36KB

MD5
045489a0639eee27bca52f48828cd93d

SHA1
436e7966e7c019273c44faa4d8c5709b816dfda3

SHA256
0151eae0eec786abb19ab59d7361b3291ae98411fae12cbbdfecd1612e16996e

SHA512
c8739a723a8648b0e380b946a97fb6cd83d6c4769ec3679bf4bc003ad0049ff5cccfc8f75a6ea272feced0020b13d3129f792f0f22cf442f0d0127f399eba22e

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
eb52a90bb70b76e946b62f50b6f7fb85

SHA1
42d767b5d1faa7dcef4cb4e1432a5f47ec2e9ee0

SHA256
48472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4

SHA512
b356c858cadd14b6ecddf134f1c494c0107a1d36be9387984fc53dcb00e6779d944f058f4ac99d0fc2fe3a427cd1c2921c6fc38ecad53909fc4b5b6f04459b5c

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
c8aef639abde97f22a44b9c0843624aa

SHA1
ab97f2e9e3c620f9c606c9147bf45ac20e13a8e1

SHA256
90ed35d68f46410beef28aa0552bee1e55de5952f68ba421303dac499f500859

SHA512
1b86090c0e799ff9e00dd0111f1d4c3fe7c5d7e8583b654db1e7eda30bd918f1e1fbd6434d6d6c7479d95281fe7bb9eee762775bd83103c291be1ce1b6c04bfe

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
2835181e80500604bc83d18332fd2ce4

SHA1
b24c901cea523d0320206b9141658e1f18c15a9c

SHA256
cea9528c81b9ef9502a23b632a7c4e09b57ed1415d7e0a25463de8f2c207d620

SHA512
29df4cebe638d245e5a20d67ed4e97af5a6df6037bfe3e8acb8e409eca6f4ece492408acdc6c141fc0727337f1ed9e8ec470c9fffccb63b4e68ead0add61e88d

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
a72aacb40dcb5b70cf1c3b5762c32bdb

SHA1
f2037346a61c051330155ec7825a0be8b8412d4e

SHA256
2e67a48a5d6b9e1a32e5d2d89a881e0b73388cde1fcabfec6b090a8ec5a20d5a

SHA512
bd3eeca93dc53ab4d2dbd76a1de3709db4da2a8cc919c01631bb7c311e4987a038d86087652fe9b6de8554a1ed89871e7428762e6b319d86266385b7dc799a3c

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
e48b7f9b2dc347474298f6f7aed64474

SHA1
2c217eec478645976e3e2bafac07bad74519c035

SHA256
a9dd42cafb8bf8aa70ed69d00580cb1fe25792b0979b0c1d501bec62b5bb4ed3

SHA512
2a78491929306b00f053de7b73333817aa043c9c1c74044c341a68c1d9b8a12d69cb400754537d40f1c1ae0ccf17078c660cb0902a198858e1a8b4dbf2fa6660

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
f871ff700510a56a54fdd56bc41b7541

SHA1
481548c8bc3254a00f497140278597b915460c48

SHA256
ab18f3bb605f3cbedaffc75b2d5a03fe21ab82179d268331ea907bdcd32c23fa

SHA512
12e3d348199566e137f02b63e4c8b4c722aa086128c0f1cea883d512075b8573d40d889d2b4452d9e3d9c02f523716da9775d93750c242a1a2d9e62f50f60fc5

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-journal

Filesize
512B

MD5
336a9287a37adbcbf0b792d57637e6aa

SHA1
011e52ed3c0a215e485bf09d104191986de13ff7

SHA256
6c200816cdab85743502c659ce5b7d4fb9f2c789614324678df6b1e3dbfbff9c

SHA512
9656d1352838404b6a7e088ad01eb8dbd417b411176fc99dc64847b7fc90fb93a4cfaf77d54de9f55f0d7806f1730ffa8297a054ae15519ef49c215b3a1e37b6

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
0a5dff9e7d3a7c4f7def9d38f5f50647

SHA1
c3d9af7a73396f595c797e07ab15dfa3f9f4c409

SHA256
b275221dc2b44f76dd664e9ba1ca0b4857e103216165f20870196d52f0ab445f

SHA512
eebd0238378234b1a285f6d8d8ae00f90107998ebe1ceaeb0fff22a5160dff45c363c1c42cd613075d025641fa40122b68dd4e779bf1280bcbd8749c6e90c92b

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-journal

Filesize
4KB

MD5
033b3e73fd6ac9ac7a32edec962c1d1e

SHA1
f9be0487f595d6f0d9d1a165c0e2e9d4fb6ec713

SHA256
581126e0f2d18d92f9430cd84f01c4e3a32ad5a5beabe401da63fc3f7af0764e

SHA512
0067e82540ed4064642479c4efcca7c66a46abb8bc02695372560ab55d750d39a70351aa8465afe6cbbe1edccfa0a73e0d7ebe5c2ba5948409a81cefb1da1704

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
25a19a8d9bb02bf9da6b519c8a85b759

SHA1
42efd3e0ecfee95259d467dd8ea2a9cc264b4630

SHA256
57f173608aff34d630ff8fccfdfa73783297da7e362d983a3b7e30eb3fcd6d99

SHA512
53950ab63f640d1306458abc10f7168e27b06dd251b4bc9676f9e24e8e5e95b06053f179fe379324f52e9ca947335593dc9432176a49a1ac5af806a1f861acef

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
274f8891dfe6db4c5e8dde9de8e22a50

SHA1
be5ec3e7de7a756ff7c8a1559ea68ad0183d342f

SHA256
52daf2a4cb2cee12bafc1f851ab6e0fc5669aa5826d9d7ef6342689c55eeae40

SHA512
8f4b6e6269464badf357389b4a19f82fbfd7988674b2ff297e3c02c61a357db810cf4a9fced492565931ff0a986a5f2fba2877da7556b2bb91383540f60ea35b

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
940937f911663d2417de17adaa5485f4

SHA1
c1d914ad3a8ca69b95b632797693a33c081241ff

SHA256
25455984944c2d491ec864104c6eafbeda447fef8a4d2f2d05339fd2995ca8c5

SHA512
545844fac0458a691d64904235e20da286388a51b5840e9f22f1e4cea30472d48b1fe1ffa4aff3b8a3ff4a572c568c2ae85f96f94ef5fa2642197f36835958c8

Download Submit
/data/data/com.systemservice/files/PersistedInstallation1024335083988064176tmp

Filesize
556B

MD5
71761d32ebf99cbe5789ac9f3d472fc5

SHA1
e8673256ac23fd2ad7120a872863b6e8b4567918

SHA256
3c962cc485b4b47f054806d041520ab1ac83db81e162bd1759a8a47737a4f7bb

SHA512
5d69fc11a5566689e4f5f77f0722ca679247bc662a4670b32a8863c28483c54f94406a2d6ec9c1d7ff9fedd2c8e340304c7d573ecf56371c4bc79f85cf6653fc

Download Submit
/data/data/com.systemservice/files/PersistedInstallation6003560196001784854tmp

Filesize
90B

MD5
52669b92a3e1d6de5e6116fd6d39008d

SHA1
91b20eb3647a439829d316bc8f0bd5433afe21d2

SHA256
2ac7b03aeae79eed687986da43c575aa97112389c4b7f3ba0d21dbf6b09530fd

SHA512
2343864a06ac0dbdf2dd12de35d982917e4371d575347a76ee36afa6f68dbca3357ff7c6b4f87489d26dea6248de88f97e952f54b875c2395306b9acccf5c7ea

Download Submit
/data/data/com.systemservice/log/log4j.txt

Filesize
6KB

MD5
f350dfeab370e2a1d9565843e8de4e75

SHA1
86dfe6bd8facd714d3a327841a1235cc096deb41

SHA256
c1dc53f5a5e85178682c26508c4b06a7dd3f0f0bef27b2cdd259efa8d11da2ca

SHA512
1b5f6ceb64dbc443e36cb008b1ed456baceb966e7f0c2f5e24014a88ae16b87751bd68d217e4cbbaee2bbe196b1b8deadb83ba8157f63791c8ec12b867d9eaf1

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads